Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/e4Wdqd1Ui_QkGNOcvywWwoTIUE4.roa
File: e4Wdqd1Ui_QkGNOcvywWwoTIUE4.roa (raw, json)
Hash identifier: GiiAX0EObAyqo2g41LoQB394yCm03uPvbaavApqyqgY=
Subject key identifier: 7B:85:9D:A9:DD:54:8B:F4:24:18:D3:9C:BF:2C:16:C2:84:C8:50:4E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4C255313EA5FEBD808143EFEB878F7AC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/e4Wdqd1Ui_QkGNOcvywWwoTIUE4.roa
Signing time: Fri 20 Oct 2023 08:13:16 +0000
ROA not before: Fri 20 Oct 2023 08:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:25:53:13:ea:5f:eb:d8:08:14:3e:fe:b8:78:f7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 08:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b859da9dd548bf42418d39cbf2c16c284c8504e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:fe:40:40:4a:50:f7:4e:14:0e:51:f6:61:
b9:50:94:08:94:87:2e:76:4a:7f:e4:83:7b:fb:f0:
46:42:28:34:08:4d:d2:ca:a9:5d:42:84:61:30:f6:
c8:99:89:99:49:0e:3e:91:6c:f5:36:df:e8:7b:9d:
33:8b:92:7a:34:eb:df:2a:1a:5f:3b:2d:e6:63:eb:
60:da:8d:13:58:b9:d2:81:6b:52:1c:1d:16:ee:64:
6d:e9:35:3d:b9:37:1b:74:93:b0:76:d6:cf:a9:a8:
b1:3d:11:ca:f5:d1:8a:93:9c:9c:4a:37:61:8f:44:
2a:95:c0:01:e2:e4:35:2a:6b:e7:28:8f:8f:57:7b:
12:12:da:c0:88:27:0c:c9:9c:72:05:c1:0b:3e:5a:
43:07:14:c4:42:0f:18:04:0d:b7:f8:c2:7b:ef:ba:
9f:8d:ce:66:e8:ff:1e:f1:24:3e:10:3c:01:5f:5e:
55:44:88:a6:34:34:c9:78:2a:2c:2e:1f:45:39:80:
79:31:82:e0:57:64:cb:38:7e:4d:07:da:fd:8d:fe:
ad:4a:c3:b3:b3:b1:c0:fa:c8:3b:3d:b6:5e:92:b1:
67:95:fc:8e:8d:73:7a:f6:ff:9e:21:99:cf:83:b1:
4d:13:fd:c7:7c:83:75:8a:b9:0b:6b:81:e0:fa:6f:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:85:9D:A9:DD:54:8B:F4:24:18:D3:9C:BF:2C:16:C2:84:C8:50:4E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/e4Wdqd1Ui_QkGNOcvywWwoTIUE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:a5:cf:ca:19:45:0c:c0:52:44:30:ba:fa:f2:66:56:e7:bb:
85:e5:a6:68:40:ae:b8:bb:c1:bb:0a:84:58:ff:ec:f0:da:84:
2f:20:8d:c4:59:f2:e1:a5:8e:03:32:23:a4:aa:ad:89:b7:cf:
b6:92:5f:44:fa:8d:74:85:50:65:e2:b2:71:f5:c7:1c:61:41:
45:5d:ce:85:cf:76:55:a1:ac:d3:7e:ca:9f:d3:a5:36:a5:e0:
2e:e7:22:bf:2b:18:2e:d2:b4:e4:c9:c8:bc:7d:57:61:52:59:
9e:52:20:62:83:94:24:e5:4f:92:f6:5f:fb:d8:c7:7e:fd:ed:
f7:11:d8:ad:57:b0:48:6f:2a:4c:45:b3:8e:e5:49:b9:24:df:
10:47:7e:97:ea:4a:f2:9c:c0:d9:3c:c9:1b:03:61:02:70:81:
6d:a9:42:27:1b:c2:b0:49:bc:8d:6e:50:65:4a:12:d4:c7:f2:
31:93:f7:d2:71:3a:3b:23:70:00:41:f8:01:a3:fd:6f:d8:14:
d0:15:38:3b:67:23:30:79:27:2c:84:75:f3:5b:60:bd:4e:eb:
ca:cb:e4:2f:38:89:f3:44:db:a1:7d:bf:25:7d:8d:87:42:2f:
6d:e7:ed:36:9c:c8:17:09:f7:62:5c:51:e8:6d:38:b9:6a:e4:
31:cf:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:23:32 2025 by rpki-client